$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/FA272BC67EBE11EEABD00B4DC4F9AE02.roa File: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (raw, json) Hash identifier: BKYUsrSTsEZZhJsjvVOhMg6+a6SrCr1C6umPKzfjlnM= Subject key identifier: E4:1A:B6:20:C3:1E:4F:2A:80:85:44:8B:86:01:3C:31:85:D6:97:62 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 01CA Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/FA272BC67EBE11EEABD00B4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:40:20 +0000 ROA not before: Fri 25 Jul 2025 04:40:54 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151802 IP address blocks: 103.226.26.0/24 maxlen: 24 103.226.27.0/24 maxlen: 24 2401:ce0:a100::/40 maxlen: 40 2401:ce0:a200::/40 maxlen: 40 2401:ce0:aa00::/40 maxlen: 40 2401:ce0:ab00::/40 maxlen: 40 2401:ce0:beef::/48 maxlen: 48 2401:ce0:face::/48 maxlen: 48 2401:ce0:fade::/48 maxlen: 48 2401:ce0:faee::/48 maxlen: 48 2401:ce0:fafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Jul 25 04:40:54 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3ed64-9abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:33:f3:41:da:b7:17:2e:0e:1a:43:ad:95: 36:36:8f:2d:25:19:5e:c7:cc:10:82:24:02:5c:77: fa:84:da:99:36:f8:f0:fa:80:16:3f:5a:0c:fd:ac: 85:3f:80:da:0d:66:87:e2:fd:77:57:bf:8d:00:05: 39:d6:ab:f2:13:08:54:cb:15:b3:55:19:7f:94:6a: 55:4a:99:57:1e:6c:81:28:6a:d6:a0:85:6b:4e:b1: cc:8b:6f:58:a4:d0:85:2d:83:4d:75:e1:15:d3:2a: 20:b3:de:7b:7f:2b:f4:55:eb:42:4e:f1:c7:46:0f: 2d:78:44:66:30:57:31:5e:e0:e0:70:f7:36:84:ac: b3:5a:26:a0:45:8c:7b:bf:5a:65:03:a5:e8:f7:1a: af:60:d3:7f:2a:3b:ef:25:b0:00:16:f8:87:a4:5f: 43:27:ac:2e:a1:49:59:4e:65:3f:ef:b5:c4:be:33: 98:e6:12:b3:23:75:21:04:f1:58:27:d6:ee:dc:c4: c2:c7:14:41:d9:aa:e3:f9:84:e1:49:ba:8b:34:f5: cc:91:5f:fb:eb:ef:8e:f6:f3:4a:15:c2:4f:15:b5: 7e:58:c3:56:4d:32:9d:35:72:e7:b0:9c:5f:48:aa: 78:d6:51:ac:dc:38:5f:08:db:cd:08:a5:23:7c:c3: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1A:B6:20:C3:1E:4F:2A:80:85:44:8B:86:01:3C:31:85:D6:97:62 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/FA272BC67EBE11EEABD00B4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.226.26.0/23 IPv6: 2401:ce0:a100::-2401:ce0:a2ff:ffff:ffff:ffff:ffff:ffff 2401:ce0:aa00::/39 2401:ce0:beef::/48 2401:ce0:face::/48 2401:ce0:fade::/48 2401:ce0:faee::/48 2401:ce0:fafe::/48 Signature Algorithm: sha256WithRSAEncryption 4f:e6:1f:91:2d:78:ff:9d:9f:05:c6:4b:fd:f4:ff:d1:60:48: 30:30:ba:10:46:82:2b:90:27:99:89:ad:be:43:c8:c5:bf:78: 3d:82:d4:13:eb:2d:7b:f9:dc:b2:d4:d5:ce:c0:f0:58:a8:a2: a6:e5:80:c7:63:4c:92:4f:6f:9e:5e:b9:d8:b4:ac:2f:09:a5: 2b:4a:6e:77:e7:cd:4d:da:10:ca:36:32:f3:c6:f9:89:42:77: 66:01:a8:f2:ec:66:68:01:24:79:a9:1c:53:c7:61:88:33:45: 44:e2:7f:bc:9e:5e:8d:45:c2:7c:f4:8f:13:87:92:92:8b:6b: 55:74:0d:6a:d0:77:1b:af:ee:54:ea:fd:e1:41:e7:35:94:a8: 41:da:f7:ff:cd:ab:b0:03:95:d2:88:68:74:cf:0c:3c:d8:44: 7c:51:6f:ef:1f:8c:3e:b5:e6:df:8f:7e:15:9f:03:82:56:e7: 63:21:dc:18:0b:ae:6b:b4:e8:a7:d0:f5:a1:71:01:ad:ff:67: c8:0d:57:bd:2d:4c:53:fa:12:5d:93:c6:51:cd:48:3a:ee:49: 66:87:fe:6f:71:cd:13:51:e0:54:85:ce:d4:ba:95:cd:81:94: a2:a8:0a:b6:4e:04:47:e3:3f:19:8a:83:80:ab:c1:a8:2b:a8: a6:c1:c6:d3 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjUwNzI1MDQ0MDU0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWQ2NC05YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg4z80HatxcuDhpDrZU2No8tJRlex8wQgiQCXHf6hNqZNvjw+oAWP1oM/ayF P4DaDWaH4v13V7+NAAU51qvyEwhUyxWzVRl/lGpVSplXHmyBKGrWoIVrTrHMi29Y pNCFLYNNdeEV0yogs957fyv0VetCTvHHRg8teERmMFcxXuDgcPc2hKyzWiagRYx7 v1plA6Xo9xqvYNN/KjvvJbAAFviHpF9DJ6wuoUlZTmU/77XEvjOY5hKzI3UhBPFY J9bu3MTCxxRB2arj+YThSbqLNPXMkV/76++O9vNKFcJPFbV+WMNWTTKdNXLnsJxf SKp41lGs3DhfCNvNCKUjfMNKyQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFOQatiDD Hk8qgIVEi4YBPDGF1pdiMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYzMUQvMDU1QUI1NDQ3REY3MTFFRTg3QjdENDMwQzRGOUFFMDIvRkEyNzJCQzY3 RUJFMTFFRUFCRDAwQjREQzRGOUFFMDIucm9hMG4GCCsGAQUFBwEHAQH/BF8wXTAM BAIAATAGAwQBZ+IaME0EAgACMEcwEAMGACQBDOChAwYAJAEM4KIDBgEkAQzgqgMH ACQBDOC+7wMHACQBDOD6zgMHACQBDOD63gMHACQBDOD67gMHACQBDOD6/jANBgkq hkiG9w0BAQsFAAOCAQEAT+YfkS14/52fBcZL/fT/0WBIMDC6EEaCK5AnmYmtvkPI xb94PYLUE+ste/ncstTVzsDwWKiipuWAx2NMkk9vnl652LSsLwmlK0pud+fNTdoQ yjYy88b5iUJ3ZgGo8uxmaAEkeakcU8dhiDNFROJ/vJ5ejUXCfPSPE4eSkotrVXQN atB3G6/uVOr94UHnNZSoQdr3/82rsAOV0ohodM8MPNhEfFFv7x+MPrXm349+FZ8D glbnYyHcGAuua7Top9D1oXEBrf9nyA1XvS1MU/oSXZPGUc1IOu5JZof+b3HNE1Hg VIXO1LqVzYGUoqgKtk4ER+M/GYqDgKvBqCuopsHG0w== -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:49 2026 by rpki-client